Pervasive Technology Labs at Indiana University Advanced Networking Management Lab (ANML)
Distributed Denial of Service Attacks(DDoS) Resources
DDoS Case Online

Attacks Against GRC.COM

DoS Attack on a Check Point Firewall

Technical Information

SANS' DDoS Roadmap

CERT's DoS FAQ

Dave Dittrichs' Homepage

DDoS Attacks/tools

CIAC

Astanetworks

How to Detect a DDoS Attack

If your company or network experiences a DDoS attack you may notice the following indicators:
  • A degradation of services on the network.

  • Locked up accounts due to failed attempts to access certain services.

  • Inability to access services over the Internet, often illustrated by HTTP Error 404", when a page cannot be found, although in this case it is due to a server that is too overwhelmed to respond to your request, or network unable to pass request.

    For additional information on this topic, please refer to:
    http://www.sans.org/infosecFAQ/securitybasics/dos.htm

Also, there are several tools can help you to detect the DDoS Attacks


Page developed by yinjin@indiana.edu

107 S. Indiana Ave., Bloomington, IN 47405-7000 (812) 855-4810

Comments: ptlabs@iu.edu
© 2001, The Trustees of Indiana University
Pervasive Technology Labs at Indiana University